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METHOD AND COMMUNICATION SYSTEM FOR DATA EXCHANGE 
AMONG MULTIPLE USERS INTERCONNECTED OVER A BUS SYSTEM 



Field Of The Invention 

The present invention relates to a method and a communication system for exchanging data 
among at least two users which are interconnected over a bus system. The data is contained in 
messages transmitted by the users over the bus system. 

The present invention also relates to a bus system for exchanging data between at least two 
users of a communication system. 

In addition, the present invention also relates to a memory element for a user of a 
communication system connected to at least one other user over a bus system for exchanging 
data. A computer program stored on the memory element is capable of being run on a 
computer system of the user, in particular on a microprocessor. The memory element is 
designed in particular as a read-only memory, a random-access memory or a flash memory. 

Background Information 

Networking of controllers, sensors, and actuators with the help of a communication system 
has increased greatly in recent years in the manufacture of motor vehicles. Synergistic effects 
are of primary concern through a distribution of fimctions to multiple controllers. In this 
connection, we speak of distributed systems. Communication among users of the 
communication system is taking place to an increasing extent over bus systems. Each user has 
a process computer which is connected via an interface to a communication controller over 
which the user is connected to the bus system. Communication traffic on the bus system, 
access mechanisms and receiving mechanisms as well as error processing are regulated 
according to a protocol. 
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A controller area network (CAN) protocol known from the related art has established itself in 
the automotive field. The CAN protocol is an event-controlled protocol, i.e., protocol 
activities such as transmitting a message are initiated by events having their origin outside the 
communication system. Unique access to the communication system is obtained by a 
5 priority-based bit arbitration. This requires that each communication be assigned a unique 
priority. The CAN protocol is very flexible because other users and messages can be added 
with no problem as long as free priorities (message identifiers) are still available. 

In cases in which the average utilization of capacity of the bus system is relatively low, there 
10 is a very high probability that a user wanting to transmit a message will actually transmit its 
message immediately or within a very short period of time. Since CAN communication 
systems are typically designed so that the average utilization of capacity of the bus system is 
sufficiently low, high-speed access to the bus system is possible in the normal case. The 
worst case from the standpoint of the commxmication system, namely when all users want to 
15 transmit at all times, however, would mean, strictly speaking, an infinitely long latency in a 
CAN bus system. This would be true at least for messages having a relatively low priority. 

[; For bus systems a probability may exist that a certain latency will not be exceeded in 
1 transmitting messages. Figure 2 shows a probabihty distribution of latencies for an event- 
2^ controlled communication system. The probability distribution has a relatively sharp peak in 
^~ the vicinity of 0 (the probabihty for a very short latency is very high), but it extends to 

infinity (no maximum latency can be guaranteed). The probability distribution shows that an 
event-oriented communication system is very suitable for the normal case (very high 
probabilities for short latencies) but is not very suitable for the worst case. This may be 
25 further exacerbated if there is a fault in a high-priority user which is permanently transmittmg 
high priority messages and thereby blocking the bus system. Consequently, messages having 
a lower priority cannot be transmitted. Messages having a low priority then have an infinitely 
long latency. 

30 An event-oriented bus system is thus very suitable for applications in which the worst case is 
tolerable but value is attached to a very good performance in the normal case. 
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The time-triggered protocol for class C (TTP/C) is a relatively new protocol. This is a 
deterministic protocol, i.e., it is strictly time-controlled, redundancy being fixedly stipulated 
in the protocol. All communication activities on the bus system are strictly periodic. Protocol 
activities such as transmitting a message are triggered only by the progression of a (global) 
5 time base. Access to the bus system is based on allocation of time ranges in which a user has 
exclusive transmission rights. This protocol is relatively inflexible because new users can be 
added only when suitable time ranges have previously been released. 

The probability of a user gaining access to the bus system when desired does not depend on 

10 prevailing utilization of bus system capacity. Figure 3 shows a probability distribution of 

latencies for a deterministic communication system. Latencies depend only on the distance in 
time from the next transmission time. Since an access request of a user occurs outside the 
range of influence of the communication system, usually being asynchronous with it, the 
latency between the access request and the actual transmission of a message is equally 

1 5 distributed over the entire time interval between two transmission times. This is a much 
broader probability distribution than that with an event-oriented bus system, i.e., the 
s probabihty of gaining access to the bus system after a very short period of time is much 
^ ; lower. However, this priority distribution is localized, i.e., the probability for any latency is 
zero. The probabilities are the same in the normal case and in the worst case, and an upper 

20 limit for the maximum latency may be given - in contrast with an event-oriented 

communication system. Deterministic communication systems are thus suitable for 
applications in which the worst case must be tolerated, even if restrictions must be accepted 
for the normal case. Therefore, preferred areas for use of deterministically controlled 
protocols include in particular apphcations in security-relevant areas (e.g., X-by-wire 

25 systems) or apphcations in which the difference between the normal case and the worst case 
is not very great. 

It is also known from the related art that a time-controlled protocol can be made more flexible 
by reserving certain time ranges and having an event-controlled transmission of messages 
30 take place within the reserved time ranges. Thus, the overall protocol still functions on a 
time-controlled basis, and messages are transmitted on an event-controlled basis only in 
certain reserved time ratiges. Depending on how access within the reserved time ranges is 
regulated, handling of the normal case and application-specific individual cases can be 
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improved without losing the basic processability of the worst case (finite maximum latency). 
A bus system that functions in this way is known in the related art as a byte-flight bus or an 
SI bus. 

5 Summary Of The Invention 

An object of the present invention is to improve the exchange of data among multiple users 
which are interconnected over a bus system to the extent that there is a high probability that 
messages can be transmitted with a short latency in the normal case, while a finite maximum 
latency can be guaranteed in the worst case. 

10 

To achieve this object, the present invention proposes that data be transmitted in an event- 
oriented manner over the bus system as long as a preselectable latency elapsing between a 
~ transmission request of a user and actual transmission by the user can be guaranteed as a 
function of the utilization of capacity of the bus system for each message to be transmitted, 
1 5 while data is transmitted deterministically over the bus system. 

If the communication system detects that finite maximum latencies can no longer be 
guaranteed for all messages or users of the bus system, the transmission of messages changes 
fh)m an event-controlled mode to a time-controlled mode. An important advantage of an 

20 event-controlled system, namely high-speed access to the bus system in the normal case, is 
preserved completely because data exchange by the method according to the present 
invention takes place in these cases as it does in an event-controlled communication system. 
An important advantage of a deterministic communication system, guaranteeing a maximimi 
latency and thus a much stronger determinism, is also completely retained with the method 

25 according to the present invention, because data exchange by the method according to the 
present invention for long latencies takes place exactly as it does in a deterministic 
communication system. 

Data exchange by the method according to the present invention is therefore especially 
30 suitable for applications in which there is at least one message having the following 
properties: 
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In the nonnal case, the message can be transmitted with no problem using a strictly 
event-controlled protocol, and the average latency is relatively short. 

The average latency in transmission via a purely deterministic communication system 
is much longer than the average latency with a purely event-controlled 
communication system. Although the behavior of the communication system in the 
case of an average latency of a strictly deterministic communication system is 
tolerable (at least for a limited period of time, e.g., for several hours during the entire 
life of the vehicle), it is much worse than that in the case of an average latency of a 
strictly event-controlled system, but this behavior is not tolerable over the entire 
lifetime of the vehicle. 

A latency much longer than the average latency of a strictly deterministic 
communication system (e.g., more than twice as long) is not tolerable. 

In developing a communication system, a demand for a maximum latency within which the 
message must be transmitted is stipulated for each message to be transmitted over the 
communication system. The communication system does not fulfill its function with regard to 
time if it cannot transmit within the stipulated maximum latency at least one of the messages 
to be transmitted. In the case of an event-controlled protocol, a bus system without utilization 
of capacity always means that there is no message at the present that any of the users would 
like to transmit. From the standpoint of the commimication system, this status is not critical if 
there is a bus system without utilization of capacity sufficient frequently. It is therefore 
suggested that the critical state at which the system switches from an event-oriented data 
transmission to a deterministic data transmission should be defined by the fact that such a 
pause (bus system without utilization of capacity) occurs at least during a certain period of 
time. 

It is therefore proposed according to an advantageous refinement of the present invention that 
the utilization of capacity of the bus system over time should be monitored, and it is assumed 
that the stipulable latency cannot be guaranteed for each message to be transmitted if the 
uninterrupted utilization of time capacity of the bus system exceeds a time threshold which 
may be stipulated in advance. A physical time is thus observed according to this refinement. 
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If uninterrupted time utilization of the bus system exceeds a preselectable time threshold, or if 
a number of messages transmitted directly in succession over the bus system exceeds a 
preselectable threshold, the communication system must assvune that too many users always 
want to transmit messages and a maximum latency can no longer be guaranteed for low- 
5 priority messages. 

As an alternative, it is proposed that utilization of capacity of the bus system be monitored 
and that it be assumed that the preselectable latency cannot be ensured for each message to be 
transmitted if the number of messages transmitted directly in succession over the bus system 
10 exceeds a preselectable threshold. The current number of messages transmitted directly in 

succession may be incremented by one or by any other desired value either before or after the 
actual transmission of the messages. As soon as there is a pause on the bus system (bus 
D system without utilization of capacity), this number is reset at 0 or initialized at any other 
y j value. The alternative embodiment is advantageous because it can be implemented especially 

IS" easily. 

y = 

q 

Jn particular, in bus systems that operate according to a distributed principle, all users of the 
h I communication system are aware of the threshold values and are thus able to recognize a 
li^ critical state simultaneously. However, in communication systems having a master user in 

2QO particular, it is conceivable for the critical state to be detected by only one user or by a few 

Li 

selected users. 

In order to make recognition of critical states error-tolerant, it is proposed according to a 
preferred embodiment of the present invention that messages transmitted by a user over the 

25 bus system in direct succession also be coimted by the user, and that the current number of 
messages transmitted in direct succession over the bus system to the other users of the bus 
system be transmitted. The current number of messages being transmitted in direct succession 
may be transmitted, for example, in a message to be transmitted along with the other 
messages. Each user has the option of checking, error detection and, if need be, error 

30 handling. With a CAN bus system, error handling may involve, for example, sending an error 
frame or setting a suitable non-acknowledgment flag (NACK). 
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If an error is detected in a transmitted message in the course of a data transmission, the 
message is destroyed by transmitting an error frame on the bus system. If a user is constantly 
transmitting error frames because of an error, then all messages transmitted over the bus 
system are destroyed and data exchange over the bus system is no longer possible. The 
problem of a faulty user destroying all messages can be overcome by using error counters. 

Transmission of the current number of messages being transmitted in succession may also 
take place without any additional load on the system (overhead). To this end, whenever a 
cyclic redundancy check (CRC) or some other checksum is transmitted with the message at 
some time to ensure the data content, the CRC or checksum is performed not only over the 
data but over the data and the number of messages without altering the length of the resulting 
CRC element or checksum. For a suitable choice of CRC polynomial, it is also possible to 
generate a sufficiently large Hamming distance, thus permitting error-tolerant transmission of 
the CRC element or checksum. The receiver forms a CRC checksum over the data received 
combined with its view of the number of messages transmitted in direct succession. If a 
difference is foimd, there is an error in the data transmission or in the number. If the 
Hamming distance is large enough, it may even be possible to determine where the error is 
located. In this case, error-tolerant transmission of the number of message transmitted in 
direct succession is possible without using any additional communication resources, and the 
corresponding detection of the critical state is also error-tolerant. 

According to an advantageous refinement of the present invention, it is proposed that the 
transmission of data be switched fi-om a deterministic transmission over the bus system to an 
event-oriented transmission when a predetermined end of the deterministic transmission is 
reached. It is in the nature of a deterministic data transmission that the end of the data 
transmission is predetermined. When this end is reached, the communication system is 
switched back to an event-oriented transmission. 

There are various possibilities for the target state in which data is transmitted 
deterministically over the bus system and maximum latencies can be guaranteed. According 
to a preferred embodiment of the present invention, it is proposed that the deterministically 
transmitted data be transmitted in a time-controlled method, in particular a time-division 
multiple-access (TDMA) based method. In a TDMA-based communication system, all 
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messages for which a maximum latency guarantee is provided alternate periodically. A 
"schedule" has already stipulated in advance which user may transmit in which time slot. The 
"schedule" must be given to the communication controllers of the users as early as the time of 
development. The "schedule" must include only those messages for which a maximum 
5 latency guarantee is given. The "schedule" is designed preferably only for an adequate (not 
optimum) performance of the critical functions. 

According to another preferred embodiment of the present invention, it is proposed that the 
deterministically transmitted data be transmitted with dynamically variable priorities of the 
10 messages or message groups in a priority shift-based method. A priority shift-based data 
transmission over the bus system is based on a dynamic change in the priorities of the 
J* messages to be transmitted during operation of the bus system. In the case of a priority shift- 
er based transmission, no "schedule" needs to be known in advance. Nevertheless, a JSnite 

maximum latency may be guaranteed for the messages. Priority shift-based data transmission 
15.' has been described in detail in another German Patent Application by the same applicant 
■ (applicant's application no. R.39890) having the same filing date as the present patent 
1=:= application. Reference is herewith made explicitly to this patent application. 

B 

All the users of the communication system are capable of detecting the critical state 
2C|=i simultaneously and in an error-tolerant manner, so the transmission fi-om event-oriented data 
transmission to deterministic data transmission and back again may also take place in an 
error-tolerant manner. There are several options for this transition. 

First, the transition may be triggered by an explicit message. This message is transmitted by 
25 the user having the highest priority. If this exphcit message is not transmitted, the user having 
the next higher priority must assume this task. Depending on the event-controlled protocol 
used as the basis, transmission of the expUcit message may take place without any additional 
time loss. In bit arbitration such as that implemented in a CAN bus system, there are n users 
that may transmit a corresponding message, where n also characterizes the error tolerance 
30 level. High priorities are reserved for this message. 



After detection of a critical state in the commimication system, each user must attempt to 
transmit an exphcit message. If the priorities for exphcit messages are very high, all other 
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users must then receive a transmission disable. The actual transmission operation and 
optionally also the content of the explicit message trigger and then determine the course of 
the subsequent deterministic data transmission. 



5 Another possibility is implicit notification of the users of the communication system 

regarding the existence of a critical state. Detection of a critical state per se causes data 
transmission to be switched over. All communication controllers switch fi-om event-oriented 
data transmission to deterministic data transmission and then use the corresponding protocol 
for further data transmission as soon as the critical state (error-tolerant) has been discovered. 

10 

The time for switching back from deterministic data transmission to event-oriented data 
transmission will depend on the type of deterministic data transmission selected. One 

1 possibility is to include in the message format of the deterministic data transmission a status 
bit which indicates whether or not the transmitter application would in fact still like to claim 
1 5 the common transmission frequency for itself Then if a sufficiently low number of users 
report a request to fransmit a message over a sufficiently large number of periods in a 
deterministic system, it will switch back to the event-oriented mode. The switch back may 

% J also be accomplished either explicitly or implicitly. 

20 Another basically different method is for a transmitter application which no longer wishes to 
claim the common transmission frequency for itself to transmit a "dummy message," the 
existence of which contains the same information as the above status bit. The nimiber of 
"dummy messages" transmitted is detectable and, if a sufficient number of "dummy 
messages" is transmitted over several periods of the deterministic system, it is possible to 

25 switch back to the event-oriented mode. 

As another method of achieving the object of the present invention, it is proposed that the 
communication system should have means for monitoring the utilization of capacity of the 
bus system, means for an event-oriented transmission of data over the bus system, means for 
30 a deterministic fransmission of data over the bus system and means for selection of an event- 
oriented or deterministic transmission, said means selecting an event-oriented transmission as 
long as a preselectable latency elapsing between a transmission request on the part of a user 
and actual transmission on the part of the user can be ensured, depending on the utilization of 
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capacity of the bus system, for each message to be transmitted, and otherwise the means will 
select a deterministic transmission. 

According to an advantageous refinement of the present invention, it is proposed that the 
communication system shall have means for carrying out the method according to the present 
invention. 

As yet another means of achieving the object of the present invention, it is proposed that the 
method according to the present invention shall be carried out using this bus system. 

Of special importance is the implementation of the method according to the present invention 
in the form of a memory element which is provided for a user in a communication system 
which is connected over a bus system to at least one other user for exchange of data. A 
computer program capable of running on a computer device of the user, in particular on a 
microprocessor and suitable for execution of the method according to the present invention is 
stored on the memory element. In this case, the present invention is thus implemented by a 
computer program stored in the memory element, so that this memory element provided with 
the computer program represents the present invention in the same way as the method for 
whose execution the computer program is suitable. A suitable memory element would include 
in particular an electric memory medium, e.g., a read-only memory, a random-access memory 
or a flash memory. 

Finally, the present invention also relates to a computer program suitable for carrying out the 
method according to the present invention when run on a computer system, in particular a 
microprocessor of a user of a communication system connected to at least one other user over 
a bus system for exchange of data. It is especially preferable if the computer program is 
stored in a memory element, in particular a flash memory. 

Brief Description Of The Drawings 

Figure 1 shows a communication system according to the present invention according to a 
preferred embodiment. 
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Figure 2 shows a probability distribution of latencies in an event-controlled communication 
system. 

Figure 3 shows a probabiUty distribution of latencies in a deterministic communication 
system. 

Figure 4 shows a probability distribution of latencies in a communication system according to 
the present invention. 

Figure 5 shows a flow chart of a method according to a preferred embodiment of the present 
invention. 

Detailed Description 

Figure 1 shows a communication system according to the present invention, labeled in its 
totality as 1. Communication system 1 includes multiple users 2, 3, 4 interconnected by a bus 
system 5 which operates on a distributed basis for exchange of data. Users 2, 3, 4 may be 
controllers in a motor vehicle, for example. Data to be exchanged is contained in messages 
transmitted by users 2, 3, 4 over bus system 5. For users 2, 3, 4 of bus system 5, there is a 
common global time base t_gl which is synchronized to an external reference time tjref at a 
preselectable time t_synch. 

Users 2, 3, 4 include a computer (process computer) designed as a microprocessor 6. A 
computer program capable of running on microprocessor 6 is stored in a memory element 7 
in the form of a flash memory. This computer program is suitable for carrying out the method 
according to the present invention. The computer program is loaded into microprocessor 6 
before or during processing. Users 2, 3, 4 also include a commvmication controller 8 
connected to microprocessor 6 over an interface 9. Communication controller 8 establishes a 
connection between users 2, 3, 4 and bus system 5. 

Figure 2 shows a probability distribution of latencies tL for an event-controlled 
communication system. A short latency t, of less than tL occurs with a probability p of 
approximately 99.9%. With a probability p of approximately 0.00001 = 10 ppm, a very long 
latency tL greater than tj = lOO-tj occurs. It can be seen on the basis of relatively high 
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probability p of a short latency tL and theoretically possible infinite latency tL that an event- 
oriented protocol is very suitable for the normal case (very high probability p for short 
latencies II) but is less suitable for the worst case. 

Figure 3 shows a probability distribution of latencies t,^ for a deterministic communication 
system. This is a uniform distribution. A short latency ti, less than t, occurs with a relatively 
low probability p of approximately 10%. Latency tL which is the largest occurring is tj ~ 
lO-tj. Probability p of a very long latency tL greater than is 0. Latencies tL depend only on 
the time interval to the next transmitting time. In the normal case and in the worst case, these 
probabilities are equal, and an upper limit for maximum latency tj may be given - in contrast 
with an event-oriented communication system. Deterministic communication systems are 
thus suitable for applications in which the worst case must be tolerated, even if restrictions 
must then be accepted for the normal case. 

According to the present invention, data is transmitted by an event-oriented method over bus 
system 5 as long as a preselectable latency tL can be ensured for each message to be 
transmitted as a function of utilization of capacity of bus system 5. Otherwise, the data is 
transmitted over bus system 5 by a deterministic method. Data transmission is switched from 
event-oriented transmission to deterministic transmission if a critical state is detected, i.e., a 
preselectable latency tL cannot be guaranteed for each message to be transmitted. 

The method according to the present invention will now be explained in greater detail on the 
basis of Figure 5. This method begins in a function block 10. In a function block 1 1, an event- 
oriented data transmission over bus system 5 is set. As soon as a critical state is detected in 
commimication system 1, there is a switch to a deterministic data transmission. A critical 
state means that a preselectable latency tL cannot be guaranteed for each message to be 
transmitted as a function of the utilization of capacity of the bus system. A critical state is 
detected in query block 12. If there is no critical state, the system branches off to function 
block 11, and data is still transmitted over bus system 5 by an event-controlled method. 
However, if a critical state is detected, the system switches to deterministic data transmission 
in a function block 13. 



NY01 435613 v1 



12 



A critical state of a communication system 1 occurs when all users 2,3, A axe attempting to 
transmit a message continuously. From the standpoint of communication system 1, this state 
is not critical when the capacity of bus system 5 is not utilized for a sufficient length of time. 
It is therefore suggested that the critical state be defined by the fact that such a pause 
5 (capacity of bus system 5 not utilized) occurs at least during a certain period of time. 

Therefore, utilization of bus system 5 in time may be monitored, for example. A critical state 
occurs when bus system 5 is utilized to capacity without interruption for a period of time 
exceeding a preselectable threshold. As an alternative, the number of messages transmitted 
over bus system 5 may also be considered. A critical state occurs when the number of 
10 messages transmitted in succession without a pause over bus system 5 exceeds a preselectable 
threshold. 

r It is within the nature of a deterministic data transmission that an end of the data transmission 
is predetermined firom the beginning. In a query block 14, a check is performed to determine 
15 whether the end of the deterministic data transmission has been reached. If this is the case, the 
method branches off to fimction block 1 1 and communication system 1 is switched back to 
the event-oriented transmission. If the end of the deterministic data transmission has not yet 

1 been reached, the method branches off to fimction block 13 and data continues to be 
transmitted by the deterministic method. 

20 

As an alternative or in addition to determination of the end of the deterministic data 
transmission, a check is also performed in query block 14 to determine whether the utilization 
of capacity of bus system 5 still necessitates a deterministic data transmission at all. It would 
also be conceivable to switch to the event-oriented data transmission even before reaching the 
25 end of the deterministic data transmission if the utilization of capacity of bus system 5 were 
to fall below a preselectable threshold. 

Figure 4 shows the probability distribution of latencies tL in communication system 1 
according to the present invention. For short latencies tL, the distribution matches the 
30 distribution known firom Figure 1 . Instead of the infinite extent of the distribution, the area 

imder the curve of the distribution is forced into a vmiform distribution for long latencies tL so 
that the integral under the distiibution curve is still 1. Therefore, the probability distribution 
for extremely long latencies tL is 0. In the transition fi-om event-oriented transmission (fi-om 0 
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to t2 - tj) to the deterministic transmission (from X2 - tj to tj). Figure 4 shows a jump in the 
probability distribution. However, the height of the distribution can be varied as desired 
through a suitable shifting of t2 so that a continuous transition from event-oriented 
fransmission to deterministic transmission may be achieved easily. 

With the sample niraibers given above, probability p for short latencies t^. of less than tj is still 
very high, namely 99.9%. After a time tj - tj, the total remaining probability p is equally 
distributed in the interval from tz-tg to tj, so that probability p for a latency greater than tj is 0. 
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